Netgear DG834Gv2 DG834Gv2 Reference Manual - Page 231
IPSec Security Association IKE, VPN Tunnel Negotiation Steps, E-5, VPN Tunnel SA
View all Netgear DG834Gv2 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 231 highlights
Reference Manual for the Model Wireless ADSL Firewall Router DG834G DG834G VPN Firewall A VPN Tunnel DG834G VPN Firewall B PCs PCs Figure E-5: VPN Tunnel SA The SA contains all the information necessary for gateway A to negotiate a secure and encrypted communication stream with gateway B. This communication is often referred to as a "tunnel." The gateways contain this information so that it does not have to be loaded onto every computer connected to the gateways. Each gateway must negotiate its Security Association with another gateway using the parameters and processes established by IPSec. As illustrated below, the most common method of accomplishing this process is via the Internet Key Exchange (IKE) protocol which automates some of the negotiation procedures. Alternatively, you can configure your gateways using manual key exchange, which involves manually configuring each paramter on both gateways. VPN Gateway IPSec Security Association IKE VPN Tunnel Negotiation Steps 1) Communication request sent to VPN Gateway 2) IKE Phase I authentication VPN Gateway 3) IKE Phase II negotiation 4) Secure data transfer 5) IPSec tunnel termination Figure E-6: IPSec SA negotiation Virtual Private Networking E-9 202-10006-05, June 2005